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June 25, 2018 

VIA ELECTRONIC SUBMISSION 


Attorney General Brian Frosh 
Office of the Attorney General 
Consumer Protection Division 
200 St. Paul Place 
Baltimore, MD 21202 
E-Mail: consumer@oag.state.md.us 

Re: Notification of Data Security Incident 

Dear Attorney General Frosh: 

We represent Boutwell Fay LLP in connection with a recent data security incident which is 
described in greater detail below. Boutwell Fay LLP takes the privacy and security of all 
information in its control very seriously and is taking steps to prevent a similar data security 
incident from occurring in the future. 

1. Nature of the security incident. 

On May 22, 2018, Boutwell Fay LLP learned of a data security incident that may have affected 
personal information belonging to some of its clients. Specifically, Boutwell Fay LLP learned that 
an unauthorized individual may have gained access to an employee’s email account and that some 
of the emails and attachments within that account may have contained personal information. As 
soon as Boutwell Fay LLP discovered the incident, Boutwell Fay LLP personnel took immediate 
steps to secure the affected email account. Boutwell Fay LLP also launched an investigation and 
retained a leading forensics firm to determine what happened and whether personal information 
was accessed or acquired without authorization. The impacted information may have included 
names, addresses, Social Security numbers, and financial account / payment card numbers. 

2. Number of Maryland residents affected. 

Boutwell Fay LLP notified one (1) Maryland resident of this data security incident. Notification 
letters were mailed on June 22, 2018. A sample copy of the notification letter provided to all 
potentially impacted individuals is included with this letter. 

3. Steps taken relating to the incident. 

Boutwell Fay LLP has taken affirmative steps to prevent a similar situation from arising in the future 
and to protect the privacy and security of all sensitive information in its possession. These steps 
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have included working with a leading forensics firm to determine what happened and whether 
personal information was accessed or acquired without authorization. Boutwell Fay LLP has also 
made arrangements to provide potentially impacted individuals with twelve (12) months of identity 
theft protection services through ID Experts. 

4. Contact information. 

Boutwell Fay LLP is committed to protecting all sensitive information in its control. If you have any 
questions or need additional information, please do not hesitate to contact me directly at (720) 292- 
2052 or at Alvssa.Watzman@LewisBrisbois.com . 

Sincerely, 

/s/ Alyssa R. Watzman 

Alyssa R. Watzman of 

LEWIS BRISBOIS BISGAARD & SMITH LLP 


Enclosure 
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